Privacy Policy

1. Two roles

For people who use the Hingemark dashboard or website we are the business that decides how data is used. For attendees and staff of an organizer we act only on the organizer's instructions as its service provider; requests about that data should go to the organizer, who can direct us to fulfil them, or to us at the address below and we will coordinate.

2. What we collect

From dashboard users: email, name (if provided), sign-in records, actions taken (approvals, submissions) and IP address at acceptance of terms.

On behalf of organizers: order details (buyer email and name, amount, time, payment identifiers), ticket identifiers, door scans (time, gate, whether staff checked an ID and whether the name matched — never the name on the ID or an image of it), approximate location of the staff phone at the time of a scan, delivery and refund events, and flags derived from support conversations (not the text).

From Stripe: the dispute, the charge and the cardholder's billing name, email and card last four digits.

3. What we do not collect

Full card numbers, images of identity documents, biometric identifiers, names or dates of birth read from identity documents, the text of customer messages, or precise long-term location of anyone.

4. How we use it

To match a dispute to an order, assemble evidence, draft a response for the organizer's review, submit the approved response through Stripe, remind the organizer of deadlines, and keep an integrity log so that records can be verified later. We do not use it for advertising, we do not sell it, and we do not share it across organizers.

5. Who receives it

Stripe (to submit responses), Anthropic (to draft text, with personal data replaced by tokens), Resend (email), Inngest (job scheduling, identifiers only) and our hosting and database provider. The current list is at /legal/subprocessors. Authorities, only where legally required.

6. How long we keep it

Personal data in a dispute (buyer email and name, card digits, the evidence pack, the draft and the PDF) is deleted 180 days after the dispute closes. Guest-list names are deleted 30 days after an event. Raw payment-provider messages are redacted after 180 days. Integrity records (hashes, timestamps, sequence numbers) are retained; they contain no direct identifiers.

7. Your choices and rights

Our dashboard is for businesses and is not directed to children; we do not knowingly collect personal data from anyone under 18 as a user of the service. Guest data we process for organizers is limited to what is described above and never includes dates of birth or images of identity documents.

Depending on where you live you may have the right to access, correct, delete or obtain a copy of personal data, and to not be discriminated against for exercising those rights. Email privacy@hingemark.app; we respond within 45 days. We do not sell or share personal data, so there is nothing to opt out of. We do not use personal data for automated decisions with legal or similarly significant effects on consumers.

8. Cookies

The dashboard uses a session cookie for sign-in and the door scanner uses a device cookie that ties a phone to a door. We do not use advertising or analytics cookies.

9. Security

Data is encrypted in transit and at rest; secrets are encrypted with keys separate from the database; access is role-based and logged; every evidence record is hash-chained and signed so that later alteration is detectable. We will notify affected organizers of a confirmed breach without undue delay and in any event within 72 hours of confirmation.

10. Contact

Hingemark, Inc. (entity TBD), privacy@hingemark.app.